Skinning - Jeff
Have you ever wished it was easier to make YUI widgets skinned to look just right with the color scheme of your site or app? This will be a preview of a new system we're building to make this far easier.

Responsive Grids - Tilo
Take a tour of our new Responsive Grids offering, which allows you to tailor a grid to your specific needs. Granular. Flexible. Built on top of YUI Grids.

A walkthrough of the fundamentals of Y.Attribute (and its various incarnations), going through the runtime execution of its API, explaining configurations and the rationale for using each, and combinations of each, their relationship to events, and maybe getting into how they are merged when extending or mixing classes.

Speaker Bio:

Developer at SmugMug. Former YUI core developer. I don't have much hair, and occasionally sound like James Earl Jones, but mostly talk about JavaScript. You may know me from YUI Open Hours.

We use YUI on the daily basis in a form of building blocks, but when it comes to boilerplating our projects, we are on our own. Mojito provides a unique opportunity for YUI developers to speed up the development process by providing boilerplate and building capabilities for YUI projects by offering a variety of options to build traditional YUI web apps, mobile apps to deploy on devices, and Node.JS applications as well. It does it by leveraging YUI Library and YUI Tool chains to build at scale.

Speaker Bio:

Caridy Patino is a Bartender at Yahoo! Mojito Team and advocacy for YUI, Mojito and Yahoo! Cocktails in general. Aside from that, he is also Principal Engineer at Yahoo! Search where he writes awesome Javascript code that is suppose to run everywhere!

So you've written a shiny new Gallery module... now you've got to explain how to use it. Selleck and YUIDoc are powerful tools, but they don't write your docs for you. In this talk we'll demonstrate *how* to be clear, using logical principles for breaking down and organizing prose at the micro level. Above all, we'll talk about how to avoid bad advice and focus on what matters. This is the stuff your college writing instructors should have taught you, but probably didn't.

Speaker Bio:

Evan Goer has been at Yahoo! since 2005. He is the author of the YUI 3 Cookbook, published by O'Reilly Media.

Mjata is a set of device-agnostic libraries for developing highly interactive and data-centric web applications. One of the libraries, Mjata.js, is an extensible YAF-based library for building robust data models and services for JS MVC architectures.

Speaker Bio:

Lingyan is a front-end/application engineer at Yahoo! Finance, who is passionate about JavaScript, MVC, and web application architecture. She has been leading the design and implementation efforts on Mjata.

A full talk dedicated to ScrollView, beginning with the overall concept, purpose, and use-cases, then diving into various implementations and reviewing interested code snippets (gesture events, 3D), then concluding with some protips and "gotchas" along with a roadmap for where it is going.

The NFL serves millions of videos every week to football fans around the world. The modern video landscape encompasses a wide range of supported formats and platforms--from high-quality multi-bitrate Flash to live streaming in HTML5. Ryan Cannon provides a deep-dive into how the NFL leverages YUI to provide a rich, trackable, and monetizable video experience to its users regardless of device.

Speaker Bio:

Ryan Cannon claims to be a mild-mannered manager of application development for the NFL, but that façade is a thin veneer over the information scientist, gamer and unabashed nerd that lurks beneath. He fled the midwest in 2007 for the temperate clime of Los Angeles, CA where he lives with his wife Jill.

Zillow recently shipped a dramatic refactoring of our two most-trafficked pages, the search map and home detail. This is a postmortem-style reflection on what we learned about YUI, our code, and the art of compromise in fast-paced software development.

Speaker Bio:

Daniel is a front end engineer at Zillow, a real estate website with over 35 million monthly uniques. When not mucking around on the front end, he enjoys singing karaoke, taking pictures, and traveling the world with his wife.

Thursday 15th November 2012

In this talk I'll provide code samples and real-world anecdotes to illustrate how to decide when to use YUI, when to use vanilla JavaScript, when to consider other libraries, and what the tradeoffs are in terms of performance and maintainability. Advice will range from simple rules of thumb to more nuanced discussion of complex architectural decisions, with examples drawn from my time working on YUI at Yahoo! and using YUI at SmugMug.

Speaker bio:

Ryan Grove is a Sorcerer at SmugMug. Before he joined SmugMug, he worked on YUI at Yahoo!, where he helped build yuilibrary.com and wrote components like Model, ModelList, View, and AutoComplete. He hails from drizzly Portland, Oregon, where the dream of the 90s is still very much alive.

A town hall meeting to discuss YUI's community. Eric will present his thoughts on how YUI can continue to progress with and for its community. This will set the context for an open discussion where everyone is encouraged to provide their feedback and insights.

We are an APAC e-commerce mobile team and built a TW mobile auction site. During the project, we also packaged some components as YUI widgets for better re-usability.The mobile UI library is called BOTTLE. And now already available in YUI gallery.

Whatever you're making, you're paid to make sure it works. If you're starting a new project, improving an existing one, and especially if you're testing JavaScript in a web browser, you'll appreciate learning the place of testing when you're writing code that works.

How can you leverage YUI for building Windows 8 apps? Got a web app that you want to convert to a Win8 app?

This talk will give a detailed look at how you can make native applications on Windows 8 while leveraging YUI and the Native APIs. We'll introduce Win8, WinJS, and explain how YUI can help you make apps faster, with clean modular code.

Speaker Bio:

Tilo is a member of the YUI team at Yahoo! He should be fixing bugs but he's giving this talk instead.

In this largely demo oriented talk, we will present both common and not so common security issues arising out of unsafe YUI coding. We will analyze real world vulnerable examples. Followed with code examples, on the right way to secure those with YUI. We will also focus on good security patterns that can eliminate a number of frontend vulnerabilities we see today, for instance, the effectiveness of auto escaping templating engines in defending against various cases of XSS, a.k.a Cross Site Scripting.

Speaker Bio:

Bishan is a web security engineer at Yahoo. He is a frequent speaker at International security and developer conferences. Amongst others, he has spoken at NullCon, c0c0n, Great Indian Developer Summit, OSI, Security Byte and ClubHack. At Yahoo, he helps engineers develop secure and defensible web apps. Both Albert and Bishan have contributed towards making YUI secure in its 3.5.0 release, and have also reported security issues on examples at YUI website.

Everyone agrees that application security is of crucial importance, and attacks on web frontends are getting more frequent, sophisticated, and dangerous. Yet the area of security testing of frontend and YUI-based applications has so far received little attention. This talk highlights the need to embed security testing in the standard repertoire of every Javascript and YUI developer, alongside with functionality and performance tests. We will emphasize the security testing as part of development workflow - writing and running tests alongside creating the code. Our main goal is to attract the YUI community's attention to this grey area and start a discussion and cooperation of webappsec and YUI worlds.

Speaker Bios:

Dmitry (@dimisec, github.com/dmitris) started his Yahoo career a few days after the Y2K developing web applications such as Yahoo! Wallet in C++. After having successfully debugged hundreds of segfaults, he moved with the flow of the Web to PHP, Javascript, NodeJS and YUI. In the last 5 years, Dmitry is part of the Yahoo security team where he had a title equally unique at Yahoo and in the industry: European Paranoid. For his merciless dealing with security bugs, he got a nickname "Dmitrinator". He is responsible for the Yahoo internal XSS scanner used across the company. He held several talks at Yahoo Security Weeks and conducted security trainings for Yahoo developers across the globe. He lives in Munich, Germany.

Albert (@yukinying) is a web security engineer at Yahoo, based out of the Hong Kong office. Part of his interest in terms of work here is to see how system could break. To some extent, "Alert" is his nickname to some Yahoos he worked with, for his notoriety with finding XSS bugs. He has been with Yahoo! for six years. He spent first year working as a software developer, service engineer and local paranoid. Then joined the security team full time. He believes, in today's changing times, if you are not moving fast, then you get owned.

With websites becoming more complex and web applications becoming more common, new and exciting development challenges are springing up in teams of all sizes. Jeff will be showcasing the issues of modern web development using a collection of libraries and the features of YUI which make it a clear leader for development teams of any size.

Speaker Bio:
Jeff, an active member and contributor to the YUI Community known as 'hatch', is an independent web developer who focuses on the development of large web projects including corporate web based applications.

In this talk we will see how and why we migrated Yahoo!'s web stack to NodeJS and the Cocktails platform.

Speaker Bio:

Diego Ferreiro works at Yahoo! as a FrontEnd engineer and as a Security Paranoid.
He was named Mojito Ambassador to evangelize the community on Mojito and Cocktails platform.
In his spare time he also enjoys messing around and experimenting with new HTML5 features.

What happens when you unleash the power of YUI3 to an audience of 500+ developers in a large financial services company? To put it shortly, things break. This talk will cover what went wrong during our journey to a component-based framework and will go hands-on as we cover the details about what was done to fix it. Technical topics include: Server-side Integration, Event Delegation and YUI Instance Caching.

Speaker Bio:

I am a Front-end Web Developer born and raised in the Texas Hill Country. I’m currently living in San Antonio with my wife and two-year old son. I’ve been using YUI professionally for over three years and last year migrated to YUI 3 as my primary framework. Back in August 2012 I created an introduction video to YUI3's Use and Add statements.